Formal Method by Jean-louis Boulanger